This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Gi_N6tN8cQRHLdyIYjUMZ4XWjPM.roa
File:                     Gi_N6tN8cQRHLdyIYjUMZ4XWjPM.roa (raw, json)
Hash identifier:          q3gQDpkLRUE8v3eH0NTfWPAJ+5kFxMMhpIYoBrp3Pyo=
Subject key identifier:   1A:2F:CD:EA:D3:7C:71:04:47:2D:DC:88:62:35:0C:67:85:D6:8C:F3
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11A1
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Gi_N6tN8cQRHLdyIYjUMZ4XWjPM.roa
Signing time:             Tue 03 Feb 2026 02:29:38 +0000
ROA not before:           Tue 03 Feb 2026 02:29:38 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9916
IP address blocks:        120.106.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4513 (0x11a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:29:38 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=1A2FCDEAD37C7104472DDC8862350C6785D68CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:fc:93:d8:4f:19:6e:d8:48:90:1e:b4:e8:
                    49:75:8f:58:f6:3e:40:d0:e4:75:cf:26:1f:ed:c3:
                    85:87:8e:ed:ca:be:15:0a:db:99:2f:cf:c7:82:f9:
                    2e:d5:27:ad:22:d4:1e:fc:98:9a:d9:39:13:07:31:
                    8c:74:d9:1b:c6:03:ea:68:b5:15:89:ba:46:fa:1b:
                    4e:10:ce:73:7b:fd:c4:47:34:57:50:e0:b8:76:90:
                    62:c4:c8:6c:dc:56:71:23:bc:51:7a:f7:55:3e:f7:
                    a3:c0:00:59:a9:43:84:08:2c:aa:05:da:ae:b4:27:
                    6d:96:4c:c5:fc:ef:3b:ae:db:de:b0:03:f0:9a:a0:
                    12:8a:68:42:bd:fa:85:16:45:26:02:11:c2:a9:df:
                    3d:62:48:03:0e:72:f6:2e:81:48:c8:db:77:2e:d9:
                    38:a2:6d:52:ac:61:ad:eb:93:a1:06:7f:a3:0c:ab:
                    6e:83:3e:b8:6e:4d:76:1b:35:dc:74:0a:92:e1:77:
                    f5:a4:43:b1:b8:e0:0b:26:b8:f0:ba:af:2c:55:c7:
                    1d:ff:d9:31:b3:81:b4:ed:b3:23:f0:ab:53:e1:24:
                    9b:0c:bf:a0:aa:53:3b:06:e4:59:48:cb:96:ca:a2:
                    71:bf:87:9f:9a:53:75:61:93:5d:1f:ad:94:f7:60:
                    95:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2F:CD:EA:D3:7C:71:04:47:2D:DC:88:62:35:0C:67:85:D6:8C:F3
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Gi_N6tN8cQRHLdyIYjUMZ4XWjPM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.106.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:6d:8e:20:37:46:75:56:bc:c1:5e:69:49:da:6f:45:11:2d:
         6e:f8:f2:c4:d8:87:e0:1e:d8:49:30:38:52:14:a2:01:33:62:
         e2:bb:70:69:08:c3:3b:1d:6b:9a:4c:86:6c:d3:ec:a6:de:8b:
         38:a3:12:c4:e1:a2:c7:19:9f:6c:7c:34:df:f3:ec:90:5d:08:
         86:df:64:41:93:f9:ac:b0:bc:e4:36:96:ae:e9:bf:3d:ae:98:
         cf:4a:20:27:24:df:1f:b9:2e:27:cf:26:5d:cd:36:42:f1:e5:
         1d:e8:85:24:ee:c7:b6:cb:94:86:02:9d:07:20:a2:f6:24:fb:
         1c:0e:8d:49:ed:8f:f2:0d:c8:1c:16:99:3c:02:07:99:1c:d2:
         b0:74:39:86:00:97:12:7b:22:4f:f7:bb:85:9f:c7:7b:44:bb:
         c6:16:f7:31:c4:88:c1:98:c0:62:05:ec:2f:74:90:06:1e:95:
         7f:35:42:5a:b1:da:02:83:a3:ec:a0:9a:b3:07:e6:75:b3:7d:
         0b:5a:5f:1a:5b:2d:49:33:7d:ec:d5:6a:33:db:c2:cf:12:34:
         2e:c9:74:2a:42:92:7b:8f:83:fd:f6:33:f1:58:02:88:7e:04:
         e8:3d:7f:e7:3a:4f:3a:7f:77:3e:48:6c:67:e2:79:7f:fe:5b:
         b2:a9:ee:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:53 2026 by rpki-client